Description

A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.

Remediation

References

CVE-2021-35413

Related Vulnerabilities

TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2022-31047)

WordPress Other Vulnerability (CVE-2007-0233)

WebLogic CVE-2022-21548 Vulnerability (CVE-2022-21548)

WordPress Plugin Events Manager Unspecified Vulnerability (5.5.5)

WordPress Plugin Feed Statistics Open Redirect (3.0)

Severity

High

Classification

CVE-2021-35413 CWE-707

Tags

Missing Update Known Vulnerabilities